Report vulnerabilities privately to the Fomkee maintainers. Do not include API tokens, Heartbeat secrets, customer URLs, request bodies, or private repository content in public issues.